Lines Matching full:ca
7 # Root CA: create certificate directly
8 CN="Test Root CA" $OPENSSL req -config ca.cnf -x509 -nodes \
10 # Intermediate CA: request first
11 CN="Test Intermediate CA" $OPENSSL req -config ca.cnf -nodes \
13 # Sign request: CA extensions
14 $OPENSSL x509 -req -in intreq.pem -CA root.pem -days 3600 \
15 -extfile ca.cnf -extensions v3_ca -CAcreateserial -out intca.pem
18 CN="Test Server Cert" $OPENSSL req -config ca.cnf -nodes \
21 $OPENSSL x509 -req -in req.pem -CA intca.pem -CAkey intkey.pem -days 3600 \
22 -extfile ca.cnf -extensions usr_cert -CAcreateserial -out server.pem
25 CN="Test Client Cert" $OPENSSL req -config ca.cnf -nodes \
27 # Sign using intermediate CA
28 $OPENSSL x509 -req -in creq.pem -CA intca.pem -CAkey intkey.pem -days 3600 \
29 -extfile ca.cnf -extensions usr_cert -CAcreateserial -out client.pem
32 CN="Test Revoked Cert" $OPENSSL req -config ca.cnf -nodes \
34 # Sign using intermediate CA
35 $OPENSSL x509 -req -in rreq.pem -CA intca.pem -CAkey intkey.pem -days 3600 \
36 -extfile ca.cnf -extensions usr_cert -CAcreateserial -out rev.pem
39 CN="Test OCSP Responder Cert" $OPENSSL req -config ca.cnf -nodes \
41 # Sign using intermediate CA and responder extensions
42 $OPENSSL x509 -req -in respreq.pem -CA intca.pem -CAkey intkey.pem -days 3600 \
43 -extfile ca.cnf -extensions ocsp_cert -CAcreateserial -out resp.pem
57 CN="Test Server DH Cert" $OPENSSL req -config ca.cnf -new \
60 $OPENSSL x509 -req -in dhsreq.pem -CA root.pem -days 3600 \
62 -extfile ca.cnf -extensions dh_cert -CAcreateserial -out dhserver.pem
68 CN="Test Client DH Cert" $OPENSSL req -config ca.cnf -new \
70 $OPENSSL x509 -req -in dhcreq.pem -CA root.pem -days 3600 \
72 -extfile ca.cnf -extensions dh_cert -CAcreateserial -out dhclient.pem
74 # Examples of CRL generation without the need to use 'ca' to issue
81 $OPENSSL ca -valid server.pem -keyfile root.pem -cert root.pem \
82 -config ca.cnf -md sha1
83 $OPENSSL ca -valid client.pem -keyfile root.pem -cert root.pem \
84 -config ca.cnf -md sha1
85 $OPENSSL ca -valid rev.pem -keyfile root.pem -cert root.pem \
86 -config ca.cnf -md sha1
88 $OPENSSL ca -gencrl -keyfile root.pem -cert root.pem -config ca.cnf \
91 openssl ca -revoke rev.pem -crl_reason superseded \
92 -keyfile root.pem -cert root.pem -config ca.cnf -md sha1
94 $OPENSSL ca -gencrl -keyfile root.pem -cert root.pem -config ca.cnf \